diff --git a/policy/modules/system/authlogin.if b/policy/modules/system/authlogin.if
index 3ad434d196..6b9d957d3a 100644
--- a/policy/modules/system/authlogin.if
+++ b/policy/modules/system/authlogin.if
@@ -712,6 +712,7 @@ interface(`auth_manage_shadow',`
 		type shadow_t;
 	')
 
+	files_rw_etc_dirs($1)
 	auth_manage_shadow_history($1)
 	auth_rw_shadow_lock($1)
 	allow $1 shadow_t:file manage_file_perms;